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Apparatus and method for safeguarding electronic equipment 
from theft 

Technical field of the invention 

5 The invention relates to an apparatus and a method for jpreventing electronic equip- 
ment from tibieft. 

Background of the invention 

Current industrial as well as governmental and private investments in computerised 
equipment and electronic devices (grow rapidlj^ and these investments form property 
10 of considerable value to tiie o^vners. However, this valuable property also attracts 
people to conunit criminal acts and in illegal ways get in possession of items be- 
longing to others. 

Not only the so-called hardware, i.e. interconnected electronic circuits with proc- 
essing capacity, memories and displays, but also and perhaps even more vulnerable 

IS may be so-called software and content of various memory locations oi^ or in asso- 
ciation with, the electronic devices. ^ccuirence|of sensitive data or material stored 
in a memory location of e.g. a laptop computer in wrong hands may have severe 
consequences to any company, organisation or enterprise as well as to a private per- 
son if content stored in memory locations of the computer is made public, for what- 

20 ever reason. 

s . . 

Several mechanical means for prevention of computer thefts are offered on the mar- 
ket, especially for preventing people &om stealing stationary desktop computers in 
offices. Those means may be for example metallic safety lockers or wires, which 
physically restrict people from opening or carrying the computer or its parts with 
25 them. Such physical means mostly are relatively e3q)ensive, cumbersome to install 
and not at all flexible. However, for mobile equipment like for instance portable 
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laptop computers, even less practical theft-preventing means are offered on the mar- 
ket, such as various attention attracting sirens and alarms. Most prior art safeguard- 
ing arrangements are software encryption systems, which for data protecti^ reasons! 
may be very useful although the electronic components do not lose their valuie after 
5 theft from the legitimate owner. 

The UK patent application GB 2 304 8 10 A discloses a security arrangement with 
sensors detecting light levels inside of a personal computer housing or motion of the 
personal computer. Furthermore, the arrangement inside the computer consists of a 
dye capsule, which is intended to rupture and spray its content outwardly upon re- 
10 ception of an electrical signal. This signal is sent from an alarm output control when 
the personal coinputer is considered stolen. It is of course difficult to distinguish 
usual "every day" handling of the personal computer in reliable manners from un- 
authorised handling aflsr the computer has been stolen. A clear disadvantage of an 

implemented security arrangement of that Idnd is the risk of numerous felse alarms 
15 leading to strongly decreased acceptance of the arrangemrait 

The intemational patent appHcation WO 97/03397 discloses a method and an ar- 
rangement for det^ring computer-thefts by means of a protective devi ce using de- 
tection with external sensors. Sensing is performed either by using a thin fihn with 
an electrically cociductive fihn, or wall anchor plates mounted on a waU of the room 

20 in which the computer is used. It can also be performed by means of an external 
sensor disposed as an iosert between the underside of the computer and the table 
surface on which the computer stands. However, a solution with a thin fflm conduc- 
tive sensor suffers from the drawback, that^e fihn will be destroyed each time the 
computer casing is opened, even when the casing is opened for normal service ac- 

25 tions or for maintenanc^ This makes this method and arrangement less convenient 
as it requires restoration of the conductive tiiin fihn after having opened the com- 
puter casing m order to reach tiie original ftmctional state again. A restoration of this 
kmd is costiy due to manual work required by professionals every time the com- 
puter casing has been opened. 
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Summary of the invention 

An object of the present invention is to overcome the aforementioned drawbacks 
concerning prior art technology in connection with stationary and portable comput- 
ers as well as with electronic devices and circuitry in general. 

5 This object of the invention is accomplished by means of an apparatus for safe- 
guarding electronic equipment, such as components in a computer, provided in a 
housing, comprising a monitoring internal sensor arrangement in connection with a 
control means, which is fed with measurement data to monitor whether the housing 
is closed or not, 

1 0 characterised by 

at least one energy provider, such as an internal or external power 

source; 

voltage generating ineans, driven by power from the energy provider 
and controlled by the control means; 
1 5 storage means, including a capacitor arrangement charged by the volt- 

age generating means; 

switching means, in connection with the storage means being adapted 
to be controlled by the control means; and 

relayed connections between components of the the electronic equip- 
20 ment and the switching means, particularly chosen to get the electronic equipment 
irreversibly out of order when initiated by the control means in response to unau- 
thorised opening of the housing, 
s 

A housing sensor means would be convenient, sensing if the housing is unauthor- 
ised opened, whereby the housing sensor means is adapted to send a warning signal 
25 to the control means, preferably a micro-controller, when sensing unauthorised 

opening. In another embodiment, a conceivable solution would be to use electronic 
equipment sensing means sensing unauthorised disconnection of at least one com- 
ponent in the electronic equipment, whereby the electronic equipment is adapted to 
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send an indication to the control means for activation of a destructive activation 
when detecting unauthorised disconnection. 

The apparatus moreover comprises identification means, identifying a user and pos- 
sibly authorising the user after comparison with a register, whereby the electronic 
5 equipment could be unlocked. Said identification means either comprises a so-called 
smart card reading means, operating with physical contacting or without physical 
contacting and/or a PIN-code reading means and/or any other human feature recog- 
nising means, such as a fingerprint and/or iris recogniser. 

In order to guarantee provision of energy for running the safeguarding apparatus, an 
10 autonomous power supplying means such as a battery, preferably a rechargeable 
battery arrangement, may be provided, wliich is supplying the apparatus and its 
parts with the sufficient electric power after having been disconnected from a mains 
power outlet 

Suitably, said destruction means generates a pulse of hig^i voltage and/or current, 
1 5 which is lead through the electronic circuitry whereby essential components within 
the circuitry are irreversibly set out of order.^lse, said destruction means could 
generate a destructive injection, preferably of a higihly conductive, gluing and/or 
corroding chemical fluid, which is distributed over vuhierable and essential elec- 
tronic components, whereby the components are irreversibly set out of order. 

20 For enhanced flexibility, remote control means could be useful, by which remote 
signals from a remote control station can be received, and whereby actions can be 
taken by tiie^'safeguarding apparatus in response to sent remote signals. 

Furthermore, prior art is afflicted with problems that are solved by a method for 
safeguarding electronic equipment, which electronic equipment is placed and pro- 
25 tected in a housing. The housing comprises monitoring means, such as an intemal 

sensor arrangement, to monitor whether the housing in closed or not and/or whether 
an authorised person operates the electronic equipment The method is characterised 
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by connecting and controlling the destruction initiation means by the monitoring 
means and providing at least one destruction means in the electronic equipment, 
which means has been particularly chosen to set the electronic equipment irreversi- 
bly of order when.initiated by a destruction initiation means, such as a controlling 
5 mioro-controller. 

Owing to the present invention as here described, a novel approach is presented that 
offers the market a convenient and cheap apparatus and a method inhibiting incen- 
tives for stealing computer-related devices. The presoit invention has the advantage 
that the trade-in value of electronic devices, possibly ranoved from stolen comput- 
10 ers is diminished due to the irreversible damage caused to the devices. It also con- 
stitutes a more flexible way of safeguarding electronic equipment, without limiting 
the mobility of the device, sudi as a stationary or portable computer. 

Brief description of the drawings 

The above and further features, advantages and benefits of the present invention will 
15 be apparent upon consideration of the following detailed description, taken in con- 
junction witii the accompanying drawings, in which like reference characters and 
figures refer to like parts throu^out, and in which: 

Fig 1 shows a schematic overview of comprised units in a first embodiment of the 
safeguarding apparatus according to Hie present invention, 

20 Fig 2 is a flow chart illustrating the sequence of activation, sensing, destruction and 
indication of ^erational states of the apparatus and the method here described. 

Detailed description 

The following description is of the best mode presentiy contemplated for practismg 
the invention. The description is not to be taken in a limiting sense, but is made 
25 merely for the purpose of describing the general principles of the invention. The 
scope of the invention should be ascert^ed with reference to the issued clahns. 
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With reference to Fig 1, a block diagram is shown of a first embodiment of the pres- 
ent invention for safeguarding electronic equipment like for instance a stationary or 
a portable computer. The main functional units of the apparatus according to the in- 
vention are mounted on a standard-sized slot card, preferably a so-called PCI-card 
5 adapted to be connectable to a corresponding PCI-slot within the computer casmg, 
which is a slot format provided in most personal computers of today. Normally, the 
motherboard of a personal computer has a bi-directional connection 301 dn^ctly to 
an external power source 300 via a transformer (not shown here). According to this 
first embodiment, the external power source 300 is also connected via a transformer 
10 to the motherboard of the personal computer, but via a destruction means 200, There 
may also be direct coimection between an input/output 130 of the micro-controller 
130 and the external power source connection 301, but this ^ptional. The destruction 
means 200 is provided on the PCI-card, and the destruction means 200 comprises a 
number of units, each of which has a cdrtain functionality and is able to communi- 
15 cate bi-directionally with a micro-controlier 100 via one of its inputs/outputs 120. 

The micro-controller 100 is in control of each action performed by the appaxBXas ac- 
cording to the invention including power management of the computer. The units of 
the destruction means 200 are the internal power management unit 205, a battery _ 
210, preferably but not necessarily rechargeable, a voltage generating means 215, a 
20 capacitor arrangement 220, preferably including a plurality of capacitors connected 
in parallel, and finally a target compone nt switch 225. Each one of the units of the 
destruction means 200 is connected to the micro-controUer.via inputs/outputs 206, 

21 1, 216, 221 and 226 respectively. 

s 

Moreover, the micro-controller 100 communicates with a sensor means 400 via an- 
25 other of its inputs/outputs 140. The sensor means 400 is also moimted on the PCI- 
card, alternatively connected to it but attached in another position within the com- 
puter casing, and includes at least two main units. These main units are on one hand 
an IR-unit (infrared unit) 410 with an input/output 41 1 and on the other hand a re- 
flective layer 430 attached to the inside of the casing of the personal computer. The 
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reflective layer 430 is preferably an adhesive, ttiin plastic film having stripes or an- 
other similar patterns or texture on it, with significant differences in contrast be- 
tween its fields. Checkers as well as waved patterns are both conceivable for use in 
other embodiments of the present invention. The IR-unit 410 is mounted on the PCI- 
5 card in a way that a set of diodes including for instance three diodes 412, 414, 416 is 
directed perpendicularly towards tiie reflective layer 430. The set of diodes 412, 
414, 416 is placed on the IR-unit 410 in a row, preferably with an IR-LED (mfirared 
light emitting diode) 416 in the middle and one detecting photodiode 412, 414 on 
each side of the middle positioned IR-LED 416. Each of the diodes 412, 414, 416 
10 has a non-transparent screening around it in order not to disturb or interfere with the 
other two diodes. This might occur in that undesked emission that has not been re- 
flected fi:om the reflective layer 430 or other undesired kinds of reflection, such as 
varying ambient light, would be captured by the detecting photodiodes 412, 414 in- 
stead of the propetly reflected IR-light which is to be analysed. 

15 The set of diodes 412, 414, 416 is arranged in a way that part of an emitted area and 
a detected area of the reflective layer will be overlapping. Two of these areas have 
been illustrated in pig 1 and have been designated 450 and 452. The intensity of the 
reflected light energy of these areas 450, 452 is captured by the IR-unit 41 0 and 
measurement data on this reflected IR-light intensity is communicated to the micro- 
20 controller 100. A certain change in measurement value of the reflected IR-light in- 
tensity is a relevant indication that the casing of the computer has been moved, pos- 
sibly for opening of the casing. Thus the micro-controller 100 is notified about the 
7 certain chafte and is able to respond to this relevant indication, perhaps by taking 
corresponding actions of for example initialising an irreversible destruction of cer- 
25 tain components of the computer. Hraice, the destruction mechanism will be acti- 
vated before the casing is completely opened. Slow changes in the measured Ught 
energy, due to ambient temperature conditions, are detected and compensated by 
utilisation of a temperature sensor (not shown) in connection with the micro- 
controller 100. 
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Furthennore, and still with reference to Fig 1, a remote accessibility unit 500 is 
■ shown, by which unit 500 the safeguarding apparatus can be activated in a number 
of ways. The remote accessibility unit is connected to tiie micro-controller 100 via 
another of its inputs/outputs 150. The apparatus for irreversible destruction of stolen 
5 electronic equipment has four differently activated states of operation. To the user 
of for instance a personal computer, &e safeguarding apparatus is either in a locked 
or unlocked state. The user herselfiliimself has a possibility of locking and unlock- 
ing the safeguarded computer, by means of a^poj^tij ized remote access transim ttar^ 
520, including at least one antemia 526i a RF-module (radio frequency mod\jleX55^ 
10 and a signal encoder by which remote access transmitter 520 mesisages are en- 
crypted, modulated and transmitted to the corresponding remote access receiver 
540. Here they are received, demodulated and decoded, whereby software con- 
trolled by the micro-controller 100 is used for decoding the message. Transmission 
of data is performed in a standardised way over tilie air interface and the assigned 
15 radio frequency band for the customer products is utilised. The remote access re- 
ceiver 540 is mounted on the PCI-card just like the otiher previously described units 
of the destruction means 200. The remote access receiver 540 also includes at least 
one antenna 544 and an KF-module 542. Except for the remote access transmitter 
520, the antenna 544 of the remote access receiver 540 is the only part of the safe- 
20 guarding arrangement that is not completely inside the computer casing. The an- 
temia is protected by a cover and is coupled to the electric circuit through a capa,ci- 
tor, to prevent from external corruption of the apparatus, for instance by removing 

the cover and applying high- voltage to the antenna. 

s 

The locking and unlockmg feature or the electronic equipment, in this embodiment 
25 a computer, is realised by redirecting the power switch to the micro-controller 1 00 
and from there connecting to the motherboard of the computer. The connection be- 
tween motherboard and micro-controller 100 enables checking whether the com- 
puter is connected to the external power source 300. The coimection between the 
power switch and the micro-controller 100 enables turning on and turning off the 
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computer as well as to prevent powering of the computer, which here means to lock 
the computer. 

^ For professionals, such as adnodmstrators or so-called super users, who are ser^g 

the computer or for maintenance reasons, it is possible to disarm the activation of 
5 the destruction mechanism prior to opening the casing of the computer to prevent 
imdesired destruction of components. Subsequently, i.e. after having carried out 
technical services, replaced or updated components of the computer, the profes- 
sional arms the destruction mechanism, whereby the computer is ready for use 
again. The various states armed/disarmed and locked/imlocked give rise to four dif- 

^ 10 ferent operational states of the computer, of which an ordinary user only accesses 

the lock and unlock features. Deactivation of iht destruction functionality accessible 

A 

exclusively for professionals, the mentioned administrators and super users. 

Another maiin unit controlled by the micro-controller 100, via the input/output 160, 
is the user information unit 600. This unit visualises and notifies the user of tiie 
15 safeguarding apparatus about the present state of operation, i.e. armed/disarmed and 
locked/imlocked state. The user information imit 600 comprises a buzzer 610 for 
audio signals and at least one diode 620, 622, 624, preferably an LED, emitting 
visible Ught Its is feasible to use visible LEDs of different visible coloi^ 
buzzer signals of different frequencies and volume for easy and unambiguous rec- 
20 ognition of signal message, also by non-professional us^s with little technical inter- 
est and/or experience. Some of tiiese diodes may be visible from the outside of the 
computer casing and others only from the inside. Hidden diodes inside the computer 



® 



casing are to ihform professionals when senj^g or maintaining the electronic 
equipment. ^ 

25 By means of the safeguarding apparatus of the present invention, a wide variety of 
components can be irreversibly |^estructe^ In a first embodiment of the invention, 
destruction of components is obtained by means of Ica Bsferring a built-up voltage_ ^ 
from the loaded caBacitoiiaErangement 220 via the target component switch 225. In 
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most cases, the rather low level of voltage is applied, approximately as low voltage 
as 20-40 V, in the opposite direction relative to the usual voltage direction when a 
component is in a normal state of operation. By applying the voltage in the opposite 
direction, a rectifier or another type of diode may be broken, whereby the compo- 

5 nent to be desti^<^d is easily accessible. Some of the valuable components of the 
computer that can be irreversibly destructed by means of the £^aratus are the fol- 
lowing: non-volatile memory locations like the hard disk 701 and other disks 702, 
the motherboard 703 and the central processing unit 704. Also various expansion 
cards 705 like the graphic card, video card, audio card and network card can be de- 

10 structed. Other units that are included among components to be destructed are the 
DVD- 706 and/or CD player 707. In addition to the previously motioned compo- 
nents, also read only memories 708, flash memories 709, etc, are included. Each 
valuable and theft-attractive component is safeguarded and can be destructed by 
means of the apparatus according to the present invention . 

15 A delicate task, which is of crucial importance in a safeguarding apparatus like the 
present invention, is to prevent undesired destruction of ccnnputer components due 
to unexpected or uj;iwanted events taking place. A single error in a logical signal 
could, in a worst case scenario, lead to irreversible destruction of all electronic 
components in a computer. Logical signal errors may occur in all kinds of electronic 

20 equipment, so the consequences must not be of the previously mentioned critical 

nature. The present invention solves the problem in two ways. The voltage used for 
destruction is generated by a circuitry including a transformer, a rectifier and a load 
cjrpacitor. Generation of a relatively low level of voltage, which still is sufficient for 
destruction of components 701-709, can be accomplished by the voltage generating 

25 means 2 1 5 in a short period of time in comparison to high-voltage levels. According 
to measurements only a period of a few tenths of a second is required for reaching a 
voltage level in the capacitor arrangement 220 of about 30 V. Loading of the ca- 
pacitor arrangement 220 is initiated first when the micro-controller 100 decides to 
take actions for destruction of components. However, the alternating input voltage is 
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not generated in usual manners by a distinct oscillating circuit, but by means of the 
micro-controller 100. The altemating output voltage is produced on one of the out- 
put pins of the micro-controller 100 and thus, the altemating output voltage is con- 
trolled by software. An erroneous logical signal can not trigger the destruction 
5 mechanism of the destruction means 200 unless the required voltage level of the ca- 
pacitor arrangement 220 has been generated at first If the either hardware or soft- 
ware of the mipo-controller 100 for whatever reason would fail, no altemating sig- 
nal is producra^and hence no voltage will be built-up. Therefore, the destmction 
mechanism is intrinsically safe and will not ever be activated by mistake. 

10 Another additional safety arrangement, which is achieved by the circuitry design, is 
that the activation of the destructive capacitor arrangement voltage is performed by 
the micro-controller 100. This means that even if a voltage has been built-iq) and is 
about to be l^ad' on to destruction of electronic components, it does not have to be 
switched out to the components 70 1-709 via the target component switch 225 . This 

15 ^ switching is controlled and performed by the micro-controUer 100, whereby activa- 
tion by mistake will not ever occur m case voltage for destraction ahready has been 
built up. V 

Although the shifts between operational states of the safeguarding ^paxatus in a 
first embodiment are made by means of the previously described encoding radio 

20 frequency key 520, there are many other conceivable methods for identification and 
authentication of users. Another way of sliifting between operational states, such as_ 
unlocking and disarming, is by means o f identification procedures, such as using a 
smart card or man ual keying of a PIN-code b y an operator or user. When identifica- 
tion is accomplished, the operator or user candidate is compared with a register of 

25 predefined authorised operators or users and the candidate may subsequently be 

authorised for usage of safeguarded electronic equipment The identification process 
could also take advantage of any other unique human features and it is conceivable 
to utilise fingaprint recognition or iris detection techniques. 
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Moreover, to the function of the destruction means 200, the voltage generating 
means 215 generates one for the electric circuitry excessively high voltage and/or 
current, which passes the target component switch 225, and is lead through the cir- 



cuitry. Preferably it is lead as a reverse current through a diode, whereby essential 
5 electronic devices either melt or are otherwis e irreversibly dan^ged and made use- 
less. In another embodiment ^estroctive highly conductive or corrosive Aemical 
^^uid^is stored in the vicinity of sensitive the electronic components. At^bsolute and 
^ — definit^ control from the micro-controller 100, the fluid may be set free and can thus 
be distributed over essential and vulnerable components 701-709 to be safeguarded, 
1 0 and eventually desti||i(^d, in the computer. Hereby is achieved a similar way of de- 
struction of essential components either through short-circuiting electrical circuitry 
or corroding vital components instead of melting as in the first embodiment. Also a 
combination of the above-mentioned techniques is a feasible and effective way, in 
which the safeguarduig apparatus works. 

1 5 Except for the locking and unlocking radio frequency key, called the remote access 
transmitter 520, it is possible to use other wireless interfaced transceiver means. 
Such means could fce a mobile telephone, a PDA and/or a variety of infrared com- 
munication terminals, each one of them enabling a way of remote accessibility to 
the safeguarding apparatus as well as authenticating and identifying the operator or 

20 user of the safeguarding apparatus. 

Next reference is to Fig 2, which is a flow chart sequentially showing the.steps for 
irreversible destruction of electronic components contained in the computer. De- 
pending on tfife access rights of the current user or professional, the here used terms 
activate and inactivate should be changed to lock and unlock. The sequence starts 
25 (step 900) with a choice of whether the destruction means 200 is activated (step 

901) or not. In case it is not activated, the sequence proceeds wiA the user's option 
to activate (step 902) the destraction means 200. If the user decides not to activate 
it, the sequence ends (step 915), otherwise the destruction means 200 is activated 
(step 903). In response to this activation, the user information unit 600 indicates 
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(904) the change in operational state to the i^er. In case the destruction means al- 
ready was activated, or currentiy has become, the sequence follows up with an on- 

A 

going analysis (step 905) of the signals transmitted from the sensor means 400, Ei- 
ther, the sensor means 400 ispoUed by the micro-controller 100, or the sensor 

5 means 400 continuously updates the micro-controller 100 about current measure- 
ment data. As soon as the computer casing is opened (step 906), the micro- 
controller 100 is notified about it and has the responsibility for taking further action 
in response to tiie indication. As long as the computer casing remains closed, the 
user has an option to inactivate (step 907) the destruction means 200, for example 

10 by locking it If the user decides to, the destruction means 200 is inactivated (step 
908) and proceeds to the end (step 915) of the sequence, otherwise the micro- 
controller 100 instructs comprised units to continue analysing (step 905) the sensor 
signals received. 

However, if an opening (step 906) of the computer casing is unambiguously de- 
15 tected by tiie micro-controller 100 and hence a destructive action is to be taken, the 
micro-controller 100 finds out whether tiie capacitor arrangement 220 is sufficiently 
charged (step 909) for enabling the destruction of components. In case it is not, the 
micro-controller 100 instmcts the voltage generating means 215 to charge (step 910) 
the capacitor arrangement 220 until it has reached a sufficient level of charge. As 
20 soon as the sufficient level of charge is reached, the micro-controller 100 instructs 
the destruction means to destr^ct^step 91 1) a first component. As long as any com- 
ponent remains functional (step 912), or has not yet been completely and irreversi- 
bly ^stmcte^ the target component switch 225 of the destruction means 200 
switches (step 913) the focus of destruction to another target component to destruct. 
25 When there is no more fimctional component remaining, the user information unit 
600 informs the user about this by indicating (step 914) the destructed state of op- 
eration. Hence, the sequence has reached its end (step 915). 



